Kindly upload the final configuration.
Thankyou
BGP AS Path Access List
Scenario:
Sugar Cane company is a international company that is growing at a rapid rate. To connect all the different sites BGP is used, the security officer however doesn't want all the sites to have full connectivity and wants you to create some filters based on AS paths.
Goal:
- All IP addresses have been preconfigured for you.
- Configure EBGP between all routers.
- You are only allowed to use AS Path Access-Lists to complete the following tasks.
- Advertise the loopback0 and loopback1 interface on all routers in BGP.
- Ensure AS1 does not become a transit AS.
- Configure router Bakers so it doesn't advertise any prefixes from AS 2 towards AS 4.
- Configure AS4 so it doesn't accept any prefixes originated by AS 1.
It took me 1000s of hours reading books and doing labs, making mistakes over and over again until I mastered all the protocols for CCNP.
Would you like to be a master of networking too? In a short time without having to read 900 page books or google the answers to your questions and browsing through forums?
I collected all my knowledge and created a single ebook for you that has everything you need to know to become a master of CCNP.
You will learn all the secrets about BGP, external BGP, Transit AS and more.
Does this sound interesting to you? Take a look here and let me show you how to Master CCNP ROUTE!
IOS:
c3640-jk9s-mz.124-16.bin
Topology:
- Related Articles
Only registered users can write comments!
Comments (10)
-
evolution 2012-06-21 11:53:30my solution
Coarse#
AS path access list 1
deny _1$
permit .*!
neighbor 192.168.14.1 filter-list 1 inBarbados#sh ip as-path-access-list
AS path access list 23
permit ^$neighbor 192.168.14.4 filter-list 23 out
neighbor 192.168.12.2 filter-list 23 out
Bakers#sh ip as-path-access-list
AS path access list 1
deny ^2_
permit .*
neighbor 192.168.34.4 filter-list 1 out
-
hapithy 2012-06-22 15:32:48Hello Rene:
Please fix the following error on your config file:
-- Barbados Router: change loopback 0 and loopback 1 to be respectively 4.4.4.4 and 44.44.44.44
-- Right now, both Coarse and Barbados Routers are using the same addresses for lo0 and lo1.
- Consequence: at start-up, they will both use the same router-Id as BGP identifier and will never be able to form adjacency.
- A cpature done on interface connecting both routers will show "BGP bad identifier" as a NOTIFICATION messgae to an OPEN sent by any of the peers.
-
ReneMolenaar 2012-07-02 16:27:22Thanks i'll fix it!
-
hapithy 2012-06-22 15:33:54
Soory Rene, lo0 on barbados should be 1.1.1.1 and lo1 should be 11.11.11.11 as Coarse is already using 4.4.4.4 and 44.44.44.44.
thanks.
-
ReneMolenaar 2012-07-02 16:27:29
Thanks i'll fix it!
-
droppedpacket 2012-07-02 07:44:15I actually like the little issues on the lab, it tends to tune your trouble shooting skills while covering the other objectives.
-
ReneMolenaar 2012-07-02 16:27:43
If you do manage to fix it you'll learn even more
-
aule 2012-08-10 14:02:15Completely agree. I find it much more pleasant to solve these labs when there's need for troubleshoot.
-
gautamdeva90 2012-11-21 13:01:52kindly upload the video my command doesn't work
ip as-path access-list 1 permit _1$
when i give this in gns3 i cant get the proper output